Quantum Error Correcting Codes Using Qudit Graph States 
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Graph states are generalized from qubits to collections of n qudits of arbitrary dimension D, and 
simple graphical methods are used to construct both additive and nonadditive, as well as degenerate 
and nondegenerate, quantum error correcting codes. Codes of distance 2 saturating the quantum 
Singleton bound for arbitrarily large n and D are constructed using simple graphs, except when n 
is odd and D is even. Computer searches have produced a number of codes with distances 3 and 
4, some previously known and some new. The concept of a stabilizer is extended to general D, and 
shown to provide a dual representation of an additive graph code. 

PACS numbers: 03.67.Pp 



I. INTRODUCTION 

Quantum error correction is an important part of 
various schemes for quantum computation and quan- 
tum communication, and hence quantum error correcting 
codes, first introduced about a decade ago [J, H, [j| have 
received a great deal of attention. For a detailed dis- 
cussion see Ch. 10 of Most of the early work dealt 
with codes for qubits, with a Hilbert space of dimension 
D = 2, but qudit codes with D > 2 have also been stud- 
ied H, i, 0, (1, S 01, EH- The y are of intrinsic interest 
and could turn out to be of some practical value. 

Cluster or graph states, which were initially introduced 
in connection with measurement based or one-way quan- 
tum computing are also quite useful for constructing 
quantum codes, as shown in in a context in which 

both the encoding operation and the resulting encoded 
information are represented in terms of graph states. In 
the present paper we follow @ in focusing on qudits with 
general D, thought of as elements of the additive group 
Win of integers mod D. However, our strategy is some- 
what different, in that we use graph states and an asso- 
ciated basis (graph basis) of the n-qudit Hilbert space in 
order to construct the coding subspace, while not con- 
cerning ourselves with the encoding process. This leads 
to a considerable simplification of the problem along with 
the possibility of treating nonadditive graph codes on 
exactly the same basis as additive or stabilizer codes. It 
also clarifies the relationship (within the context of graph 
codes as we define them) of degenerate and nondegener- 
ate codes, though in this paper we focus mainly on the 
latter. The approach used here was developed indepen- 
dently in [IH and [3 for D = 2, and in for D > 2; 
thus several of our results are similar to those reported 
in these references. 

Following an introduction in Scc.[H]to Pauli operators, 
graph states, and the graph basis, as used in this paper, 
the construction of graph codes is the topic of Sec. IIIII 



In Sec. MI Al we review the conditions for an ((n, K, S))d 
code, where n is the number of carriers, K the number 
of codewords or dimension of the coding space, 8 the dis- 
tance of the code, and D the dimension of the Hilbert 
space of one qudit. We also consider the distinction be- 
tween degenerate and nondegenerate codes. Our defini- 
tion of graph codes follows in Sec. IIIIB1 and the tech- 
niques we use to find nondegenerate codes, which are the 
main focus of this paper, are indicated in Sec. MI Cl while 
various results in terms of specific codes are the subject 
of Sec. HH 

In Sec. IIVBI we show how to construct graph codes 
with <5 = 2 that saturate the quantum Singleton (QS) 
bound for arbitrarily large n and D, except when n is odd 
and D is even, and we derive a simple sufficient condi- 
tion for graphs to yield such codes. For n odd and D = 2 
we have an alternative and somewhat simpler method of 
producing nonadditive codes of the same size found in 
[la ]. For both D = 2 and D = 3 we have studied nonde- 
generate codes on sequences of cycle and wheel graphs, 
in Sees. IIV Cl and HV Dl These include a number of cases 
which saturate the QS bound for S = 2 and 3, and others 
with (5 = 3 and 4 which are the largest possible additive 
codes for the given n, D, and S. Section IIVDI contains 
results for a series of hypercube graphs with n = 4, 8, 
and 16, and in particular a ((16, 128,4))2 additive code. 

In Sec. [V] we show that what we call G-additive codes 
are stabilizer codes (hence "additive" in the sense usually 
employed in the literature), using a suitable generaliza- 
tion of the stabilizer formalism to general D. In this per- 
spective the stabilizer is a dual representation of a code 
which is equally well represented by its codewords. The 
final Sec. IVII has a summary of our results and indicates 
directions in which they might be extended. 



II. PAULI OPERATORS AND GRAPH STATES 



A. Pauli operators 
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Let {\j)}, j = 0, 1, . . .D— 1 be an orthonormal basis for 
the £>-dimensional Hilbert space of a qudit, and define 
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the unitary operators [l7| 

z = f> j ij}oi, x=T,m®i\, (i) 

3=0 j=0 

with © denoting addition mod D. They satisfy 

Z D = I = X D , XZ = ujZX, uj := c 2lT '^ D . (2) 

We shall refer to the collection of D 2 operators {X^Z V }, 
/i, v = 0, 1, . . . , D— 1, as (generalized) Pauli operators, as 
they generalize the well known /, X, Z, XZ (= — iY) for 
a qubit. Together they form the Pauli basis of the space 
of operators on a qudit. 

For a collection of n qudits with a Hilbcrt space TL = 
TLi <E> H2 <8> • • ■ W„ wc use subscripts to identify the cor- 
responding Pauli operators: thus Z\ and X\ operate on 
the space TLi of qudit I. An operator of the form 

P = u/X? Z? Xf Z? • • • X^ , (3) 

where A, and /i; and v\ for 1 < i < n, are integers in the 
range to D — 1, will be referred to as a Pauli product. 
If fii and i/j arc both 0, the operator on qudit / is the 
identity, and can safely be omitted from the right side of 
(J3j> . The collection Q of all operators P of the form (J3]) 
with A = 0, i.e., a prcfactor of 1, forms an orthonormal 
basis of the space of operators on TL with inner product 
(A, B) = D~ nr Tt(A^ B); we call it the (generalized) Pauli 
basis Q. 

If P and Q are Pauli products, so is PQ, and hence the 
collection V of all operators of the form ([3]) for n fixed 
form a multiplicative group, the Pauli group. While V is 
not Abelian, it has the property that 

PQ = ui^QP, (4) 

where [i is an integer that depends on P and Q. (When 
D = 2 and uj = — 1 it is customary to also include in 
the Pauli group operators of the form ([3]) multiplied by 
i. For our purposes this makes no difference.) 

The base of an operator P of the form ([3]) is the col- 
lection of qudits, i.e., the subset of {1, 2, . . . n}, on which 
the operator acts in a nontrivial manner, so it is not just 
the identity, which is to say those j for which either [ij 
or Uj or both are greater than 0. A general operator R 
can be expanded in the Pauli basis Q, and its base is 
the union of the bases of the operators which are present 
(with nonzero coefficients) in the expansion. The size of 
an operator R is defined as the number of qudits in its 
base, i.e., the number on which it acts in a nontrivial 
fashion. For example, the base of P = uj 2 X 2 X 4 Z i (as- 
suming D > 3) is {1, 4} and its size is 2; whereas the size 
of R = X 1 + 0.5X 2 Z 2 Z 3 + iX 4 is 4. 

For two distinct qudits I and m the controlled- phase 
operation Ci m on TLi ® H. m , generalizing the usual 
controllcd-phase for qubits, is defined by 

D-1D-1 D-l 
j=0 fe=0 3=0 



Of course, C/ m = C m i, and it is easily checked that 
(Ci m ) D = I- It follows from its definition that C; m com- 
mutes with Zi and Z m , and thus with Z p for any qudit 
P- 



B. Graph states 

Let G = (V, E) be a graph with n vertices V, each 
corresponding to a qudit, and a collection E of undirected 
edges connecting pairs of distinct vertices (no self loops). 
Multiple edges arc allowed, as in Figfl]for the case of D = 
4, as long as the multiplicity (weight) does not exceed 
D — 1, thus at most a single edge in the case of qubits. 
The Im element T; m = r m ; of the adjacency matrix T is 
the number of edges connecting vertex I with vertex m. 
The graph state 

|G> =U\G°) =u(\+f n ^j , (6) 

is obtained by applying the unitary operator 

U= II (Cl™f lm - (7) 

to the product state 

|G°>:=[+>®|+> «•••!+>, (8) 

where 

\+) := D-^ 2 J2 \J) 0) 

3=0 

is a normalized eigenstate of X, with eigenvalue 1. In 
([7]) the product is over all distinct pairs of qudits, with 
(Cim) = I when I and m are not joined by an edge. Since 
the Cim for different I and m commute with each other, 
and also with Z p for any p, the order of the operators on 
the right side of ([7]) is unimportant. 




FIG. 1: Action of X and X 2 on graph state (D = 4). 
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Given the graph G we define the graph basis to be the 
set of D n states 

|o) := \a 1 ,a 2 ,...,a n ) = Z a \G) 

= Z?Z?..-Z^\G) (10) 

where a — (ax, . . . a n ) is an n-tuple of integers, each tak- 
ing a value between and D — 1. The original graph 
state \G) is |0, 0, ... ,0) in this notation. That this col- 
lection forms an orthonormal basis follows from the fact 
that the Z p operators commute with the Cj m operators, 
so can be moved through the unitary IA on the right side 
of ©. As the states Z v |+), < v < D - 1, are an 
orthonormal basis for a single qudit, their products form 
an orthonormal basis for n qudits. Applying the unitary 
U to this basis yields the orthonormal graph basis. The 
?i-tuple representation in (| 10[) is convenient in that one 
can define 

\a © b) := \ai © b\,a 2 © b 2 , ■ ■ ■ , a n © b n ) , 

\ja) := \jai,ja 2 , . . .,ja n ) , (11) 

where j is an integer between and D — 1, and arithmetic 
operations are mod D. 

One advantage of using the graph basis is that its ele- 
ments are mapped to each other by a Pauli product (up 
to powers of co) , as can be seen by considering the action 
of Zi or Xi on a single qudit. The result for Zi follows at 
once from (|10|1 . And as shown in App. [Aland illustrated 
in Fig. [U the effect of applying Xi to \G) is the same as 
applying (Z m ) Tlm to each of the qudits corresponding to 
neighbors of I in the graph. Applying these two rules and 
keeping track of powers of u> resulting from interchang- 
ing X\ and Z\, see ([2]), allows one to easily evaluate the 
action of any Pauli product on any \a) in the graph basis. 

III. CODE CONSTRUCTION 

A. Preliminaries 

Consider a quantum code corresponding to a K- 
dimcnsional subspacc, with orthonormal basis {|c 9 }}, 
of the Hilbert space TL of n qudits. When the Knill- 
Laflamme condition 

(c q \Q\c r } = f(Q)5 qr (12) 

is satisfied for all q and r between and K — 1, and 
every operator Q on 7i such that 1 < size(Q) < 8, but 
fails for some operators of size 8, the code is said to have 
distance 5, and is an ((n, K, S))d code; the subscript is 
often omitted when D = 2. (See the definition of size 
in Sec. Ill Al The only operator of size is a multiple 
of the identity, so (fT2"j) is trivially satisfied.) A code of 
distance <5 allows the correction of any error involving at 
most 1(6 — 1)/2J qudits, or an error on 5 — 1 (or fewer) 
qudits if the location of the corrupted qudits is already 
known (e.g., they have been stolen). 



It is helpful to regard (JT2J) as embodying two con- 
ditions: the obvious off-diagonal condition saying that 
the matrix elements of Q must vanish when r ^ q; and 
the diagonal condition which, since f(Q) is an arbitrary 
complex- valued function of the operator Q, is nothing but 
the requirement that all diagonal elements of Q (inside 
the coding space) be identical. The off-diagonal condi- 
tion has a clear analog in classical codes, whereas the 
diagonal one does not. Both must hold for all operators 
of size up to and including 8—1, but need not be satisfied 
for larger operators. 

In the coding literature it is customary to distinguish 
nondegenerate codes for which f(Q) = for all operators 
of size between 1 and 8—1, i.e., for all q and r 

(cq\Q \cr) = for 1 < sizc(Q) < 8, (13) 

and degenerate codes for which f(Q) ^ for at least one 
Q in the same range of sizes. See p. 444 of [|J for the 
motivation behind this somewhat peculiar terminology 
when 8 is odd. In this paper our focus is on nondegener- 
ate codes. For the most part they seem to perform as well 
as degenerate codes, though there are examples of degen- 
erate codes that provide a larger K for given values of n, 
8, and D than all known nondegenerate codes. Examples 
are the ((6, 2, 3))2 [H| an d ((25, 2, 9))2 codes mentioned in 

B. Graph codes 

When each basis vector \c q ) is a member of the graph 
basis, of the form (JTUJ) for some graph G, we shall say 
that the corresponding code is a graph code associated 
with this graph. As noted in Sec. U this differs from 
the definition employed in 0, M, [^L but agrees with that 
in more recent D = 2 studies [13], [3], because we do 
not concern ourselves with the processes of encoding and 
decoding. In what follows we shall always assume 8 > 2, 
since 5 = 1 is trivial. As the left side of (fT2| is linear in 
Q, it suffices to check it for appropriate operators drawn 
from the Pauli basis Q as defined in Sec. Ill Al It is helpful 
to note that for any Q £ Q, any pair \c q ) and |c r ) of 
graph basis states and any n-tuple a, 

(c q ®a\Q \cr © a) = (c q \ Z- a QZ a \c r ) 

= ^{c q \Q\c r ) (14) 

for some integer fi depending on Q and a; sec (|TTJ|) . (jTTJl 
and ((4|. Therefore, if (p~2|) is satisfied for some Q and 
a collection {|c g )} of codewords, the same will be true 
for the same Q and the collection {|c 9 ffia)} (with an 
appropriate change in f(Q)). Thus we can, and hereafter 
always will, choose the first codeword to be 

|c o ) = |0,0,...,0) = |G). (15) 

Analogous to Hamming distance in classical informa- 
tion theory we define the Pauli distance A between two 
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graph basis states as 

A(c q ,c r ) = A(\c q ) , \cr}) := 

min{size(g) : (c q \Q \c r ) ^ 0}, (16) 

where it suffices to take the minimum for Q € Q, the 
Pauli basis. (Kct symbols can be omitted from the ar- 
guments of A when the meaning is clear.) Also note the 
identities 

A(c g , c r ) = A(c r , c q ) = A(c q © a, c r © a) 

= A(c ,c r ec q ), (17) 

where a is any n-tuple, and means difference mod D, 
see (fTl~j) . The second equality is a consequence of (fT4")) . 
Note that if in (|16[) we minimize only over Q operations 
which are tensor products of Z's (no X's), A is exactly 
the Hamming distance between the n-tuples c q and c r , 
see (UnD- 

For the case q — r, where (fPoj) gives (for Q = I), 
we introduce a special diagonal distance A' which is the 
minimum size of the right side of (jTBJ) when one restricts 
Q to be an element of Q of size 1 or more. The diagonal 
distance does not depend on the particular value of q = r, 
but is determined solely by the graph state \G) — sec (TT4"]) 
with r = q — and thus by the graph G. This has the 
important consequence that if we consider a particular 
G and want to find the optimum codes for a given 8 that 
is no larger than A', the collection of operators Q S Q for 
which (TT2"| needs to be checked will all have zero diagonal 
elements, f(Q) = 0, and we can use (fT3|) instead of (fT2j) . 
In other words, for the graph in question and for 6 < A', 
all graph codes arc nondegenerate, and in looking for an 
optimal code one need not consider the degenerate case. 
Our computer results in Sec. IIVI arc all limited to the 
range 6 < A' where no degenerate codes exist for the 
graph in question. Any code with S > A' will necessarily 
be degenerate, since there is at least one nontrivial Q for 
which (TT2"| must be checked for the diagonal elements. 

A code is G-additive (graph-additive) if given any two 
codewords \c q ) and \c r ) belonging to the code, \c q © c r ) 
is also a codeword. As shown in Sec. [V] this notion of 
additivity implies the code is additive in the sense of 
being a stabilizer code. For this reason, we shall omit 
the G in G-additive except in cases where it is essential 
to make the distinction. Codes that do not satisfy the 
additivity condition arc called nonadditive. The additive 
property allows one to express all codewords as "linear 
combinations" of k suitably chosen codeword generators. 
This implies an additive code must have K = D r , r an 
integer, whenever D is prime. We will see an example of 
this in Sec. [IV] for D = 2. 

The quantum Singleton (QS) bound 

n > \og D K + 2(5 - 1) or K < D n ~ 2< - 5 ~^ (ig) 

is a simple but useful inequality. We shall refer to codes 
which saturate this bound (the inequality is an equality) 
as quantum Singleton (QS) codes. Some authors prefer 



the term MDS, but as it is not clear to us how the concept 
of "maximum distance separable," as explained in [20(, 
carries over to quantum codes, we prefer to use QS. 



C. Method 

We are interested in finding "good" graph codes in the 
sense of a large K for a given n, S, and D. The first 
task is to choose a graph G on n vertices, not a trivial 
matter since the number of possibilities increases rapidly 
with n. We know of no general principles for making this 
choice, though it is helpful to note, see App. [A] that the 
diagonal distance A' cannot exceed 1 plus the minimum 
over all vertices of the number of neighbors of a vertex. 
Graphs with a high degree of symmetry are, for obvious 
reasons, more amenable to analytic studies and computer 
searches than those with lower symmetry. 

Given a graph G and a distance 5, one can in prin- 
ciple search for the best nondegenerate code by setting 
|co) = \G), finding a |ci) with A(co,ci) > 6, after that 
\c2) with both A(co,C2) > 5 and A(ci,C2) > 5. and 
so forth, until the process stops. However, this may 
happen before one finds the largest K, because a bet- 
ter choice could have been made for \c q ) at some point 
in the process. Exhaustively checking all possibilities is 
rather time consuming, somewhat like solving an optimal 
packing problem. 

In practice what we do is to first construct a lookup 
table containing the D n — 1 Pauli distances from \G) to all 
of the other graph basis states, using an iterative process 
starting with all Q S Q of size 1, then of size 2, etc. This 
process also yields the diagonal distance A'. As we are 
only considering nondegenerate codes, we choose some 
S < A', so that (TT5)) can be used in place of (TT2")) . and use 
the tabic to identify the collection S of all graph basis 
states with a distance greater than or equal to S from 
Co) = \G). If 5" is empty there are no other codewords, 
so K = 1. However, if S is not empty then K is at least 2, 
and a search for the optimum code (largest K) is carried 
out as follows. 

We produce a graph S (not to be confused with G) in 
which the nodes are the elements of S, and an edge con- 
nects two nodes if the Pauli distance separating them — 
easily computed from the lookup table with the help of 
(|17p — is greater than or equal to S. An edge in this graph 
signifies that the nodes it joins are sufficiently (Pauli) sep- 
arated to be candidates for the code, and an optimal code 
corresponds to a largest complete subgraph or maximum 
clique of S. Once a maximum clique has been found, the 
corresponding graph basis states, including \cq), satisfy 
(fT3| and span a coding space with the largest possible K 
for this graph G and this d. 

The maximum clique problem on a general graph is 
known to be NP-complete [2l| and hence computation- 
ally difficult, and we do not know if S has special prop- 
erties which can be exploited to speed things up. We 
used the relatively simple algorithm described in [22j for 



finding a maximum clique, and this is the most time- 
consuming part of the search procedure. 

The method just described finds additive as well as 
nonadditive codes. In fact one does not know beforehand 
whether the resultant code will be additive or not. If one 
is only interested in additive codes, certain steps can be 
modified to produce a substantial increase in speed as 
one only has to find a set of generators for the code. 



IV. RESULTS 

A. Introduction 

Results obtained using methods described above are 
reported here for various sequences of graphs, each se- 
quence containing graphs of increasing n while preserving 
certain basic properties. We used a computer search to 
find the maximum number K of codewords for each graph 
in the sequence, for distances 5 < A' and for D = 2 or 3, 
qubits and qutrits, up to the largest number n of qudits 
allowed by our resources (running time) . Sometimes this 
revealed a pattern which could be further analyzed using 
analytic arguments or known bounds on the number of 
codewords. 

In the case of distance 8 = 2 we can demonstrate the 
existence of QS codes for arbitrarily large values of n 
and D, except when n is odd and D is even, see Part A. 
In the later subsections we report a significant collection 
of D = 2 and 3 codes for 5 = 2, 3, and 4, including 
QS codes; codes which are the largest possible additive 
codes for that set of n, D and 6; and a new ((16, 128, 4))2 
additive code. 

Tables show the K found as a function of other param- 
eters. The meaning of superscripts used in the tables is 
given below. 

• a - Indicates the maximum clique search was ter- 
minated before completion. This means the code 
we found might not be optimal, i.e. there might 
be another code with larger K for this graph. We 
can only say the code is maximal in the sense that 
no codeword can be added without violating (fT3"| . 
Absence of this superscript implies no code with 
a larger K exists for this S and this graph, either 
because the program did an exhaustive search, or 
because K saturates a rigorous bound. 



• b - Indicates a nonadditive code, 
this superscript are additive. 



Codes without 



• c - Indicates a QS code, one where K saturates the 
Singleton bound (fT8| . 

• d - Indicates this is not a QS code, but the largest 
possible additive (graph or other) code for the given 
n, 6 and D, This follows from linear programming 
bounds in [23[ for D = 2 and [24| for D = 3, along 
with the fact, Sec. IIII Bl that for an additive code, 





(a) 



(b) 



(0 





(d) 



(e) 



FIG. 2: Examples from different graph sequences: (a) bar 
(odd n), (b) star, (c) cycle, (d) wheel, (e) n — 16 hypercube. 



K must be an integer power of D when D is prime. 
A larger nonadditive code for this graph might still 
be possible in cases flagged with a as well as d. 



B. Distance 5 — 2; bar and star graphs 

It was shown in [lj| that for D = 2 one can construct 
6 = 2 QS codes for any even n, and similar codes for 
larger D are mentioned, without giving details, in [f|. 
One way to construct graph codes with 6 = 2 is to use the 
method indicated in the proof, App. [Bj of the following 
result. 

Partition theorem. Suppose that for a given D the 
vertices of a graph G on n qudits can be partitioned into 
two nonempty sets V\ and V2 with the property that for 
each vertex in V\ the sum of the number of edges ( the sum 
of the multiplicities if multiple edges are present) joining 
it to vertices in V2 is nonzero and coprime to D, and the 
same for the number of edges joining a vertex in V% to 
vertices in Vi . Then there is an additive QS code on G 
with distance 5 = 2. 

A bar graph is constructed by taking n vertices and 
dividing them into two collections V\ and V2, of equal 
size when n is even, and one more vertex in V2 when n is 
odd, as in Fig.^a). Next pair the vertices by connecting 
each vertex in V\ by a single edge to a vertex in V2 , with 
one additional edge when n is odd, as shown in the figure. 
(Multiple edges are possible for D > 2, but provide no 
advantage in constructing codes.) When n is even the 
conditions of the partition theorem are satisfied: 1 is 
always coprime to D. For odd n, the last vertex in Vi 
has 2 edges joining it to V2, which is coprime to D when 
D is odd. Hence bar graphs yield 6 = 2 QS codes for all 
n when D is odd, and for even n when D is even. 

A star graph, Fig. [2fb), has a central vertex joined by 
single edges to every peripheral vertex, and no edges con- 
necting pairs of peripheral vertices. Since the diagonal 
distance A' is 2, nondegenerate star codes cannot have 5 
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TABLE I: Maximum K for qubit and qutrit cycle graphs. See 
Sec. IIV Al for detailed meaning of superscripts. 



n 


u 

5 = 2 


= Z 

5 = 3 


L) 

5 = 2 


Q 

= o 
5 = 3 


4 


4 C 


o 


9 C 


l c 


5 


6 b 


2 C 


27 c 


3 C 


6 


16 c 


1 


81 c 


9 C 


7 


22 b 


2 d 


243 c 


27 c 


8 


64 c 


8 d 


729 c 


81 c 


9 


96 ab 


12 b 


2187 c 


243 c 


10 


256 c 


18 6 


6561 c 


729 c 


11 


272 ab 


32 ad 


19683 c 


729" d 


12 


1024 c 


g 4 ad 


59049 c 


2187" d 



"Non-exhaustive search 
'Nonadditive code 

c Code saturating Singleton bound J 18D 
^Largest possible additive code 

larger than 2. As in the case of bar codes, one can con- 
struct additive QS codes for any n when D is odd, and 
for even n when D is even (25|. For odd n and D = 2 
there are nonadditive codes with 

Kin) = 2"- 2 - -(, n ~],\. (19) 

see App.Ofor details. Codes with these parameters were 
discovered earlier by Smolin et al. (l6j using a different 
approach. Computer searches show that for all odd n < 7 
star graphs cannot yield a K larger than (jT9j) . 

C. Cycle graphs 

We used computer searches to look for graph codes 
based on cycle (loop) graphs, Fig.^c). TablcUshows the 
maximum number K of codewords for codes of distance 
5 = 2 and 5 = 3 for both D = 2 qubits and D = 3 
qutrits. In the qutrit case the best codes were obtained 
by including one double edge (weight 2), as in Fig. EJJc), 
though when n is odd equally good codes emerge with 
only single edges. In the qubit case all edges have weight 
1. 

The D = 2 entries in Table [J include for n = 5 the well 
known ((5,2,3))2, the nonadditive ((5,6, 2)) 2 presented in 
1261] . and, for larger n, a ((9, 12 3)) 2 code similar to that 
in [23] and the ((10, 18, 3)) 2 of [13( based upon the same 
graph. 

The D = 3, 5 = 3 entries are interesting because the 
QS bound is saturated for 4 < n < 10 but not for n = 11. 
The ((11, 3 6 = 729, 3))3 code wc found, the best possible 
additive code according to the linear programming bound 
in [24[, falls short by a factor of 3 of saturating the K = 
3 7 = 2187 QS bound, and even a nonadditive code based 
on this graph must have K < 1990 [H]. 

One can ask to what extent the results for 5 = 2 in 
Table U could have been obtained, or might be extended 



to larger n, by applying the Partition theorem of Part 
A to a suitable partition of the cycle graph. It turns 
out — we omit the details — that when D is odd one can 
use the Partition theorem to produce codes that saturate 
the QS bound for any n, but when D is even the same 
approach only works when n is a multiple of 4. In partic- 
ular, the ((6, 16, 2)) 2 additive QS code in Table Q] cannot 
be obtained in this fashion since the cycle graph cannot 
be partitioned in the required way. 



D. Wheel graphs 

If additional edges are added to a star graph so as to 
connect the peripheral vertices in a cycle, as in Fig. [21(d), 
the result is what we call a wheel graph. Because each 
vertex has at least three neighbors, our search procedure, 
limited to 8 < A', can yield 5 = 4 codes on wheel graphs, 
unlike cycle or star graphs. The construction of 5 = 2 
codes for any D is exactly the same as for star graphs, so 
in Table HT1 we only show results for 5 = 3 and 4, for both 
D = 2 and 3. The ((16, 128, 4)) 2 additive code appears to 
be new, and its counterpart in the hypercube sequence is 
discussed below. 

TABLE II: Maximum K for qubit and qutrit wheel graphs. 
See Sec. IIV Al for detailed meaning of superscripts. 
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"Non-exhaustive search 
^Nonadditive code 

c Code saturating Singleton bound I I18H 
d Largcst possible additive code 



E. Hypercube graphs 

Hypercube graphs, Fig. [2je), have a high symmetry, 
and as n increases the coordination bound, App. [2] al- 
lows A' to increase with n, unlike the other sequences 
of graphs discussed above. We have only studied the 
D = 2 case, with the results shown in Table IIIII Those 
for 5 = 2 are an immediate consequence of the Partition 
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theorem: each hypcrcube is obtained by adding edges be- 
tween two hypercubes of the next lower dimension, and 
these are the V\ and V2 of the theorem. The genera- 
tors for the ((16, 128,4))2 additive code are given in Ta- 
ble HVl The 2 7 = 128 codewords are of the form, see (fTT|) , 
\a\g 1 © Qf2fl l 2 © ' ' ' ot-idj) i where each otj can be either 
or 1. 

TABLE III: Maximum K for qubit hypercube graphs. See 
Sec. II V Al for detailed meaning of superscripts. 
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V. G- ADDITIVE CODES AS STABILIZER 
CODES 

The stabilizer formalism introduced by Gottesman in 
[29[ | for D = 2 (qubits) provides a compact and power- 
ful way of generating quantum error correcting codes. It 
has been extended to cases where D is prime or a prime 
power in 0, 0, H3] • In [H stabilizer codes were extended 
in a very general fashion to arbitrary D from a point of 
view that includes encoding. However, our approach to 
graph codes is somewhat different, see Sec. U and hence 
its connection with stabilizers deserves a separate discus- 
sion. We will show that for any D > 2 a G-additive (as 
defined near the end of Sec. IIIIB[) code is a stabilizer 
code, and the stabilizer is effectively a dual representa- 
tion of the code. 

The Pauli group V for general n and D was defined 
in Sec. Ill Al Relative to this group we define a stabilizer 
code (not necessarily a graph code) C to be a K > 1- 
dimensional subspace of the Hilbert space satisfying three 
conditions: 

CI. There is a subgroup S of V such that for every T in 



TABLE IV: Generators of ((16, 128, 4)) 2 additive code for hy- 
percube graph 



Generator 


Bit notation 




|0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 1, 1, 1} 


9 2 > 


jo, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 1, 0, 0, 1, 1} 




|0,0,0,0,0,0,0,0,1,1,0,0,0,0,1,1) 


9 4 > 


|0,0,0,0,0,0,1,1,0,1,0,0,0,1,0,0) 


95> 


|0, 0, 0, 0, 1, 1, 0, 0, 0, 0, 0, 1, 0, 0, 0, 1} 


l9e> 


10,0,1,1,0,0,0,0,0,1,0,0,0,1,0,0} 


\9i) 


|1, 1,0,0,0,0,0,0,0,0,0, 1,0,0,0, 1} 



S and every \ip) in C 

T\tl>) = \1>) (20) 

C2. The subgroup S is maximal in the sense that every 
T in V for which ^ is satisfied for all \ip) E C 
belongs to S. 

C3. The coding space C is maximal in the sense that any 
ket that satisfies (|2H)l for every T G S lies in C. 

If these conditions are fulfilled we call S the stabilizer 
of the code C. That it is Abelian follows from ((4]), since 
for K > there is some nonzero satisfying (|20| . One 
can also replace (|20|) with 

T\c q ) = \c q ) (21) 

where the {|c g )} form an orthonormal basis of C. Note 
that one can always find a subgroup S of V satisfying 
CI and C2 for any subspace C of the Hilbert space, but 
it might consist of nothing but the identity. Thus it is 
condition C3 that distinguishes stabilizer codes from non- 
additive codes. A stabilizer code is uniquely determined 
by S as well as by C, since S determines C through C3. 

As we shall see, the stabilizers of G-additivc graph 
codes can be described in a fairly simple way. Let us 
begin with one qudit, n = 1, where the trivial graph G 
has no edges, and the graph basis states are of the form 
{Z c |+}} for c in some collection C of integers in the 
range < c < D — 1. The subgroup S of V satisfying 
CI and C2 must be of the form {X s } for certain values 
of s, < s < D — 1, belonging to a collection S. This 
is because Z and its powers map any state Z c \ +) to an 
orthogonal state, and hence T in ((2"Tj) cannot possibly 
contain a (nontrivial) power of Z. Furthermore, since 

X s Z c |+) = u cs Z c |+) , (22) 

sec ([2]), X s will leave {Z c |+)} unchanged only if uj cs = 1, 
or 

cs = (mod D). (23) 

Thus for S to satisfy CI, it is necessary and sufficient 
that (|23|) hold for every c S C , as well as every s G S. 
Further, S = {X s } is maximal in the sense of C2 only if S 
contains every s satisfying (f2"3")l for each c <G C. As shown 
in App. |Dl such a collection S must either (depending 
on C) consist of s = alone, or consist of the integer 
multiples vs\, with v = 0, 1, . . . (D/ s\ — 1), of some s\ > 
that divides D. In either case, S is a subgroup of the 
group 7Ld of integers under addition mod £>, and indeed 
any such subgroup must have the form just described. 

We now take up C3. Given the maximal collection S 
of solutions to (|23p . we can in turn ask for the collection 
of C' of integers c in the range to D — 1 that satisfy (|23|) 
for every s in S. Obviously, C contains C, but as shown 
in App. |Dl C — C if and only if C is a subgroup of Z D , 
i.e., C is G-additive. Next note that every T in S, as it is 
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a power of X and because of (|22|) , maps every graph basis 
state to itself, up to a phase. Thus when (and only when) 
C is G-additive, the codewords are just those graph basis 
states for which this phase is 1 for every Te5. To check 
C3, expand an arbitrary \ip) in the graph basis. Then 
T \ip) = \ip) for all T £ S means that all coefficients must 
vanish for graph basis states that do not belong to C. 
Hence C3 is satisfied if and only if C is G-additive. 

The preceding analysis generalizes immediately to n > 
1 in the case of the trivial graph G° with no edges. A 
graph code C has a basis of the form {Z C \G }} for a 
collection C of integer n-tuples c £ Z£,, and is G-additive 
when the collection C = {c} is closed under component- 
wise addition mod D, i.e., is a subgroup of ZJ,. Whether 
or not C is G-additive, the subgroup S of V satisfying 
CI and C2 consists of all operators of the form X s = 
X^ 1 X% 2 ■ ■ ■ with the n-tuple s satisfying 

n 

c-s:=^2cisi = (mod D) (24) 
i=i 

for every c £ C. Just as for n = 1, S cannot contain 
Pauli products with (nontrivial) powers of Z operators. 
Let S denote the collection of all such s. The linearity 
of (l24|) means S is an additive subgroup of ZJ,. 

One can also regard (|24|) as a set of conditions, one for 
every s £ S, that are satisfied by certain c £ Z^>. The set 
C of all these solutions is itself an additive subgroup of 
ZJ,, and contains C. In App. [D]we show that C = C if 
and only if C (the collection we began with) is an additive 
subgroup of Z£> , and when this is the case the sizes of C 
and 5* are related by 

\C\ ■ \S\ = D n . (25) 

Just as for n = 1 . any X s maps a graph basis state for the 
trivial graph G° — they are all product states — onto itself 
up to a multiplicative phase, and the same argument used 
above for n = 1 shows that C3 is satisfied for all T £ S 
if and only if C is G-additivc. 

To apply these results to a general graph G on n qubits, 
note that the unitary U defined in (J7| provides, through 
(|6|) and (fTQ| , a one-to-one map of the graph basis states 
of the trivial G° onto the graph basis states of G. At 
the same time the one-to-one map UPU^ carries the S 
satisfying CI and C2 (and possibly C3) for the G° code 
to the corresponding S, satisfying the same conditions 
for the G code. (The reverse maps are obtained by inter- 
changing W and U.) Consequently, the results obtained 
for G° apply at once to G, and the transformation allows 
the elements of the stabilizer for the G graph code to be 
characterized by integer n-tuples s satisfying (|2~4"|) . Thus 
we have shown that G-additive codes are stabilizer codes, 
and for these the coding space and stabilizer group de- 
scriptions are dual, related by (|2"4"|) : each can be derived 
from the other. 



VI. CONCLUSION AND DISCUSSION 

In this paper we have developed an approach to graph 
codes which works for qudits with general dimension D, 
and employs graphical methods to search for specific ex- 
amples of such codes. It is similar to the approaches 
developed independently in [l| HH EH ■ We have used it 
for computer searches on graphs with a relatively small 
number n of qudits, and also to construct certain families 
of graphs yielding optimum distance 8 = 2 codes for var- 
ious values of D and n which can be arbitrarily large. It 
remains a challenging problem to do the same for codes 
with distance 8 > 2. 

In a number of cases we have been able to construct 
what we call quantum Singleton (OS) codes that satu- 
rate the quantum Singleton bound [2| : these include the 
6 = 2 codes for arbitrarily large n and D mentioned 
above, and also a number of S = 3 codes in the case of 
D = 3 (qutrits) , see Tables [J and [Til The results for 
cycle graphs for D = 3 and 6 = 3 in Table U are inter- 
esting in that the QS bound is saturated for n < 10, but 
fails for n = 11, as it must for nondegenerate codes; see 
the discussion in Sec. IIV CI Our results are consistent 
with the difficulty of finding QS codes for larger 5 [23[ , 
but suggest that increasing D may help, as observed in 
Q. It is worth noting that we have managed to con- 
struct many of the previously known nonadditive codes, 
or at least codes with the same ((n, K, S))d, using simple 
graphs. Some other nonadditive codes not discussed here, 
such as the ((10, 24, 3))2 code in [lij], can also be obtained 
from suitably chosen graphs. While all these results are 
encouraging, they represent only a beginning in terms 
of understanding what properties of graphs lead to good 
graph codes, and how one might efficiently construct such 
codes with arbitrarily large n and 5, for various D. 

As noted in Sec. IIIIB1 all graph codes with distance 
S < A', where A' is the diagonal distance of the graph, 
are necessarily nondegenerate, and our methods devel- 
oped for such codes will (in principle) find them all. All 
codes with 6 > A' are necessarily degenerate codes, and 
their systematic study awaits further work. It should be 
noted that our extension of graph codes to D > 2 is based 
on extending Pauli operators in the manner indicated in 
[3TI ] . Though the extension seems fairly natural, and it is 
hard to think of alternatives when D is prime, there are 
other ways to approach the matter when D is composite 
(including prime powers), which could yield larger or at 
least different codes, so this is a matter worth exploring. 

The relationship between stabilizer (or additive) codes 
and G-additive (as defined in Sec. IIII Bp graph codes has 
been clarified by showing that they are dual representa- 
tions, connected through a simple equation, (|24| . of the 
same thing. One might suspect that such duality extends 
to nongraphical stabilizer codes, but we have not studied 
the problem outside the context of graph codes. Nonad- 
ditive codes, which — if one uses our definition, Sec. [V} 
do not have stabilizers, are sometimes of larger size than 
additive codes, so they certainly need to be taken into 
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account in the search for optimal codes. The graph for- 
malism employed here works in cither case, but computer 
searches are much faster for additive codes. 
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APPENDIX A: THE X-Z RULE AND RELATED 

X-Z Rule. Acting with an X operator on the i'th audit 
of a graph state \G) produces the same graph basis state 
as the action of Z operators on the neighbors of audit i, 
raised to the power given by the edge multiplicities r.; rn . 

The operator Xi commutes with C; m when i ^ I and 
i ^ m, but if i = I (or similarly i = m) one can show 
using ([5]) and dJ) that 

XiCim = Ci m Z m Xi = Z m Ci m Xi. (Al) 

That is, an Xi operator can be pushed from left to right 
through a C\ m with at most the cost of producing a Z 
operator associated with the other qudit: if i = I one 
gets Z rn , if i — m one gets Zi. Since all Z commute with 
all C, one can place the resulting Z m either to the left or 
to the right of C; m . 

Now consider pushing Xi from the left to the right 
through U, the product of C/ m operators defined in j7]). 
Using (jAlj) successively for those C; m that do not com- 
mute with Xi , one sees that this can be done at the cost 
of generating a Z m for every edge of the graph connect- 
ing i to another vertex m. Let the product of these be 
denoted as Z := ri(z=i m )eE ^m m - Then, with definition 
(|6|), we can show 

Xi \G) = XiU \G°) = ZUX, \G°) 

= ZU = Z \G) , (A2) 

which completes the proof of the X-Z Rule. 

For graph codes satisfying (|T5)) . the X-Z Rule leads to 
the: 

Coordination bound. The diagonal distance A' for a 
graph G cannot exceed v+l, where v is the minimum over 
all vertices of the number of neighbors of a vertex, this 
being the number of vertices joined to the one in question 
by edges, possibly of multiplicity greater than 1. 

To make the counting absolutely clear consider Fig. [TJ 
where the vertex on the left has 3 neighbors, and each 
of the others has 1 neighbor, so that in this case v = 1. 
To derive the bound, apply X to a vertex which has v 
neighbors. By the X-Z rule the result is the same as ap- 
plying appropriate powers of Z to each neighbor. Let P 



be this X tensored with appropriate compensating pow- 
ers of Z at the neighboring vertices in such a way that 
P \G) = \G). The size of P is v + 1, and A' can be no 
larger. 

Another useful result follows from the method of proof 
of the X-Z Rule: 

Paulis to Paulis. Let P be a Pauli product ([3]), and for 

IA defined in ([7|) let 

P' = U^PU, P" = UPU^. (A3) 

Then both P' and P" are Pauli products. 

To see why this works, rewrite the first equality as 
UP' = PU, and imagine pushing each of the single qudit 
operators, of the form Xj J Zj 3 , making up the product 
P through U from left to right. This can always be done, 
see the discussion following (|A1[) . at the cost of producing 
some additional Z operators, which can be placed on the 
right side of U, to make a contribution to P' . At the end 
of the pushing the final result can be rearranged in the 
order specified in © at the cost of some powers of u>, see 
([2]). The argument for P" uses pushing in the opposite 
direction. 



APPENDIX B: PARTITION THEOREM PROOF 

Given the partition of the n qudits into sets V\ and 
V2 containing n\ and n-i elements, the code of interest 
consists of the graph basis states |c) = |ci, C2, . . . , c n ) 
satisfying the two conditions 

^c, e (mod D) (Bl) 

Y^Cj = (mod D) (B2) 

jev 2 

This code is additive and contains K = D 711 ^ 1 x D n2 ~ x = 
D n ~ 2 codewords. (The counting can be done by noting 
that (|B1| defines a subgroup of the additive group Z^, 1 , 
and its cosets are obtained by replacing with some other 
integer on the right side of (|B1[) .) 

We first demonstrate that this code has S > 2 by show- 
ing that any Pauli operator, except the identity, applied 
to a single qudit maps a codeword into a graph basis 
state not in the code. If Z v for < v < D is applied to 
a qudit in V\ , the effect will be to replace on the right 
side of (|Blj) with v, so this graph state is not in the code. 
If X^, < /i < D is applied to a qudit in V\ the result 
according to the X-Z Rule, App. [2] will be the same as 
placing Z operators on neighboring qudits in V% (as well 
as Vi) in such a way that on the right side of (|B2|) is 
replaced by gpL, where g is the total number of edges (in- 
cluding multiplicities) joining the V± qudit with qudits in 
V2. But as long as g is coprime to D, as specified in the 
condition for the theorem, gfj, cannot be a multiple of D, 
and (|B2[) will no longer be satisfied. The same is true if 
Z V X 11 is a applied to a qudit in V\ . Obviously the same 
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arguments work for Pauli operators applied to a single 
qudit in V2. Thus we have shown that 8 > 2. 

But 8 > 2 is excluded by the QS bound, so we conclude 
that we have an additive code of K = D n ~ 2 elements and 
distance 8 = 2 that saturates the QS bound. 



APPENDIX C: CONSTRUCTION OF QUBIT 
STAR GRAPH CODES 

As noted in Sec. IIVBI a star graph for 71-qubits con- 
sists of a central vertex joined by edges to n— 1 peripheral 
vertices. Let V\ be the central vertex and V2 the set of 
peripheral vertices. When n is even and D = 2 the con- 
ditions of the Partition theorem, Sec. IIVBI are satisfied, 
and the 8 = 2 code constructed in App. IB1 consists of the 
2«-2 gj-aph basis states with no Z on the central qubit 
and an even number r of Z's on the peripheral qubits, 
thus satisfying (|Blj) and (|B2j) . and yielding an additive 
QS code. 

When n is odd the central vertex is connected to an 
even number n — 1 of vertices in V2 , so the conditions of 
the Partition theorem no longer hold. A reasonably large 
8 = 2 nonadditive code can, however, be constructed by 
again assuming no codeword has Z on the central qubit, 
and that the code contains all graph basis states with r 
Z'a on the peripheral qubits for a certain selected set R 
of r values. 

The set R must satisfy two conditions. First, it cannot 
contain both r and r + 1, because applying an additional 
Z to a codeword with r Z'b yields one with r+1, and one 
cannot have both of them in a code of distance 8 = 2. 
Second, applying X to the central vertex and using the 
X-Z rule, App. [5] maps a codeword with r Z's to one 
with r' = n — 1 — r; hence R cannot contain both r and 
n—l — r. For example, when n = 7 (n ,— 1 = 6 peripheral 
qubits) the set R = {0, 2, 5} satisfies both conditions, as 
does R = {1, 4, 6}, whereas R = {1, 2, 6} violates the first 
condition and R = {1, 3, 5} the second. 

By considering examples of this sort, and noting that 
the number of such graph basis states with r Z's is (™~ ) 

which is equal to ( ™7- )' onc sccs ^at for n odd one 
can construct in this way a nonadditive code with 

Ti^^-Ki"-^) (C1) 

codewords. 



APPENDIX D: SOLUTIONS TO c ■ s = (mod D) 

Let A be the collection of all n-component integer 
vectors (i.e., n-tuples) of the form a = (ai, 02, . . . a„), 
< a,j < D — 1, with component- wise sums and scalar 
multiplication defined using arithmetic operations mod 
D. In particular, A is a group of order D n under 



component-wise addition mod D. We shall be interested 
in subsets C and S of A that satisfy 

n 

c • s := V cisi = (mod D) (Dl) 

for all c G C and s G S. Given some collection C, we 
shall say that S is maximal relative to C if it includes 
all solutions s that satisfy (|D1[) for every c G C. It is 
easily checked that a maximal S is an additive subgroup 
of A: it includes the zero vector and —s mod D whenever 
s G S. A similar definition holds for C being maximal 
relative to a given 5. We use \C\ to denote the number 
of elements in a set or collection C. 

Theorem. Let C be an additive subgroup of A, and 
let S be maximal relative to C , i.e., the set of all s that 
satisfy (|D1|) for every c G C . Then C is also maximal 
relative to S , and 

\C\ ■ \S\ = D n . (D2) 

The proof is straightforward when D is a prime, since 
is a field, and one has the usual rules for a linear 
space. The composite case is more difficult, and it is 
useful to start with n = 1: 

Lemma. Let C be a subgroup under addition mod 
D of the integers lying between and D — 1, and S all 
integers in the same range satisfying 

cs = (mod D) (D3) 

for every c G C . Then C consists of all integers c in the 
range of interest which satisfy (|D3|) . and |C| ■ |5| = D. 

When C = {0} the proof is obvious, since |C| = 1 and 
5*| = D. Otherwise, because it is an additive subgroup 
of Zo, C consists of the multiples {fici} of the smallest 
positive integer c\ in C, necessarily a divisor of D, when 
fi takes the values 0, 1, . . . Si — 1, where s± = D j c\. Onc 
quickly checks that all integer multiples s = vs \ of this 
s\ satisfy (|D3j) and are thus contained in S. But S is 
also an additive subgroup, and Si is its minimal posi- 
tive element (except in the trivial case c\ = 1), for were 
there some smaller positive integer s' in S we would have 
< c\s' < D, contradicting (|D3[) . Similarly there is no 
way to add any additional integers to C while preserving 
the subgroup structure under addition mod D without 
including a positive c less than c\ , which will not satisfy 
CQ3) for s = St. 

For n > 1 it is helpful to use a generator matrix F, 
with components F r i, each between and D — 1, with 
the property that c G C if and only if it can be expressed 
as linear combinations of rows of F, i.e., 

d = b r F rl (mod D) (D4) 

r 

for a suitable collection of integers {b r }. This collection 
will of course depend on the c in question, and for a given 
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c need not be unique, even assuming (as we shall) that 
< b r < D — 1. In particular the matrix F for which 
each row is a distinct c in C, with r running from 1 to 
\C'\, is a generator matrix. It is straightforward to show 
that if F is any generator matrix for C, S consists of all 
solutions s to the equations 

n 

J2 F nsi = (modd) for r = 1,2,.... (D5) 

z=i 

The collections C and S, vectors of the form (|D4[) and 
those satisfying (|D5[) . remain the same if F is replaced 
by another generator matrix F' obtained by one of the 
following row operations: (i) permuting two rows; (ii) 
multiplying (mod D) any row by an invertible integer, 
i.e., an integer which has a multiplicative inverse mod D; 
(iii) adding (mod D) to one row an arbitrary multiple 
(mod D) of a different row; (iv) discarding (or adding) 
any row that is all zeros, to get a matrix of a different size. 
Of these, (i) and (iv) are obvious, and (ii) is straightfor- 
ward. For (iii), consider what happens if the second row 
of F is added to the first, so that F' rl = F rl except for 

Fil= F il+ F 2l (modi?). (D6) 

Then setting 

b\ = b-L, b' 2 = b 2 -b l (mod d), b\ = b t for I > 3 (D7) 

leads to the same c in (|D4[) if b and F are replaced by 
b 1 and F' on the right side. Likewise, any c that can be 
written as a linear combination of F' rows can be writ- 
ten as a combination of those of F, so the two matrices 
generate the same collection C, and hence have the same 
solution set S to (|D5|) . Since adding to one row a different 
row can be repeated an arbitrary number of times, (iii) 
holds for an arbitrary (not simply an invertible) multiple 
of a row. 

The corresponding column operations on a generator 
matrix arc (i) permuting two columns; (ii) multiplying a 
column by an invertible integer; (iii) adding (mod D) to 
one column an arbitrary multiple (mod D) of a different 
column. Throwing away (or adding) columns of zeros 
is not an allowed operation. When column operations 
are carried out to produce a new F' from F, the new 
collections C and S' obtained using (|D4j) and (|D5j) will in 
general be different, but C is an additive subgroup of the 
same size (order), \C'\ = \C\, and likewise \S'\ = \S\. The 
argument is straightforward for (i) and (ii), and for (iii) 
it is an easy exercise to show that if the second column 
of F is added to the first to produce F' , the collection C 
is mapped into C by the map 

ci = ci + c 2 (mod D) ; c[ = c; for I > 2 (D8) 



whose inverse will map C into C when one generates 
F from F' by subtracting the second column from the 
first. Thus \C\ = \C'\. The same strategy shows that 
\S'\ = \S\; instead of |D8} use s' 2 = s 2 ~ si (mod D), 
and s[ = si for I ^ 2. 

The row and column operations can be used to trans- 
form the generator matrix to a (non unique) diagonal 
form, in the following fashion. If each F r i is zero the 
problem is trivial. Otherwise use row and column per- 
mutations so that the smallest positive integer / in the 
matrix is in the upper left corner r = 1 = I. Suppose / 
does not divide some element, say -F13, in the first row. 
Then by subtracting a suitable multiple of the first col- 
umn from the third column we obtain a new generator 
F' with < F[ 3 < f, and interchanging the first and 
third columns we have a generator with a smaller, but 
still positive, element in the upper left corner. Continue 
in this fashion, considering both the first row and the first 
column, until the upper left element of the transformed 
generator divides every element in both. When this is 
the case, subtracting multiples of the first column from 
the other columns, and multiples of the first row from 
the other rows, will yield a matrix with all zeros in the 
first row and first column, apart from the nonzero upper 
left element at r = 1 = I, completing the first step of 
diagonalization. 

Next apply the same overall strategy to the sub matrix 
obtained by ignoring the first row and column. Contin- 
uing the process of diagonalization and discarding rows 
that are all zero (or perhaps adding them back in again) , 
one arrives at a diagonal n x n generator matrix 



Frl = flSrl, (D9) 



where some of the /; may be zero. The counting problem 
is now much simplified, because for each I q can be any 
multiple mod D of //, and s; any solution to //s; = 
(mod D), independent of what happens for a different I. 
Denoting these two collections by C/ and Si, the lemma 
implies that |C/| • \Si\ — D for every /, and taking the 
product over I from 1 to n yields (|D2[) . This in turn 
implies that C consists of all possible c that satisfy (|D1|) 
for all the seS. To see this, note that the size \C\ of C 
is D n /\S\. If we interchange the roles of C and S in the 
above argument (using a generator matrix for S, etc.), we 
again come to the result (|D2j) . this time interpreting |C| 
as the number of solutions to (|D1[) with S given. Thus 
since it cannot be made any larger, the original additive 
subgroup C we started with is maximal relative to S. 
This completes the proof. 
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